2024-10-01_80356717333bfe8359d4f81cd6615e05_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-01_80356717333bfe8359d4f81cd6615e05_bkransomware
Size

514KB
MD5

80356717333bfe8359d4f81cd6615e05
SHA1

aa788d9787f48cb895abdc796973ba2a06b015f3
SHA256

b4fa30033f0019bc145afbd4bb74e7a2a315c9dd5d57a0d06ee425e3738e4cb2
SHA512

191e1c07eeecadc6f96e6056d7f13b3f7e7bc66b7a7c1220932d56a22547e104c4d467de38628c31644e52a49ddf00d3190fd9dcfc4e968ce68266192b5b9198
SSDEEP

6144:OD5ql8env/fm5YNHwKEIofGGeAziJM+U3OmHtvetDml4CFqXq7WNkFKjkiw+n74v:ODBe3frNHw9lVNQy5qX27KjkWn7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-01_80356717333bfe8359d4f81cd6615e05_bkransomware

Files

2024-10-01_80356717333bfe8359d4f81cd6615e05_bkransomware
.exe windows:5 windows x86 arch:x86

e437db028e10cfa78c3e74bdce3417e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetCurrentObject
SetTextJustification
GetClipRgn
GetPolyFillMode
GetDCBrushColor
GetTextCharacterExtra
GetFontUnicodeRanges
GetTextAlign
GetGraphicsMode
GetTextCharset
GetNearestColor
GetRandomRgn
UpdateColors
GetMetaRgn
GetTextColor
GetStretchBltMode
GetDeviceCaps
GetMapMode

user32

GetMenuState
GetCursor
GetDlgItemInt
GetDialogBaseUnits
SetFocus
GetMenuCheckMarkDimensions
RemovePropA
GetWindowContextHelpId
ShowWindow
PostMessageA
IsWindowEnabled
GetScrollPos
GetMenuItemID
LoadIconA
GetDC
WindowFromDC
EnableWindow
CheckDlgButton
GetMenu
GetForegroundWindow
SetWindowTextA
BeginPaint
DrawTextA
MoveWindow
GetMenuContextHelpId
GetDlgItem
EndDialog

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
SetFilePointerEx
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
OutputDebugStringW
FreeEnvironmentStringsW
GetModuleHandleA
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
GetDriveTypeA
GetLastError
LockResource
IsDebuggerPresent
GlobalSize
IsProcessorFeaturePresent
GetFileTime
GetFileType
QueryPerformanceCounter
GetStdHandle
GlobalAlloc
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
WriteFile
GetModuleFileNameW
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
GetCurrentThreadId
GetConsoleCP
GetConsoleMode
CloseHandle
GetModuleFileNameA
GetEnvironmentStringsW
SetEnvironmentVariableA

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e437db028e10cfa78c3e74bdce3417e2

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 445KB - Virtual size: 444KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 43KB - Virtual size: 69KB

.text
Size: 445KB - Virtual size: 444KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 43KB - Virtual size: 69KB